Lucene search
+L

4531 matches found

OSV
OSV
added 2023/10/25 6:17 p.m.5 views

CVE-2023-26576

Missing authentication in the SearchStudentsRFID method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction sensitive student data by unauthenticated attackers...

7.5CVSS5.8AI score0.00695EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/25 6:17 p.m.6 views

CVE-2023-26569

Unauthenticated SQL injection in the StudentPopupDetailsTimetable method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers...

9.1CVSS5.8AI score0.00759EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/25 6:17 p.m.6 views

CVE-2023-26571

Missing authentication in the SetStudentNotes method in IDAttend’s IDWeb application 3.1.052 and earlier allows modification of student data by unauthenticated attackers...

7.5CVSS5.8AI score0.00603EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/25 6:17 p.m.4 views

CVE-2023-26568

Unauthenticated SQL injection in the GetStudentGroupStudents method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers...

9.1CVSS5.8AI score0.00759EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/25 6:17 p.m.57 views

CVE-2023-26571

Missing authentication in the SetStudentNotes method in IDAttend’s IDWeb application 3.1.052 and earlier allows modification of student data by unauthenticated attackers...

7.5CVSS7.7AI score0.00603EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/25 6:17 p.m.4 views

CVE-2023-26570

Missing authentication in the StudentPopupDetailsTimetable method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction sensitive student data by unauthenticated attackers...

7.5CVSS5.8AI score0.00695EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/25 6:17 p.m.6 views

CVE-2023-26574

Missing authentication in the SearchStudents method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction sensitive student data by unauthenticated attackers...

7.5CVSS5.8AI score0.00695EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/25 6:17 p.m.5 views

CVE-2023-26575

Missing authentication in the SearchStudentsStaff method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction sensitive student and teacher data by unauthenticated attackers...

7.5CVSS5.8AI score0.00702EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/25 6:17 p.m.20 views

Authentication flaw

Missing authentication in the SearchStudents method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction sensitive student data by unauthenticated attackers...

5CVSS7.7AI score0.00695EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/10/25 6:17 p.m.21 views

Authentication flaw

Missing authentication in the StudentPopupDetailsEmergencyContactDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitive student data by unauthenticated attackers...

5CVSS7.7AI score0.00695EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/10/25 6:17 p.m.18 views

Authentication flaw

Missing authentication in the SetStudentNotes method in IDAttend’s IDWeb application 3.1.052 and earlier allows modification of student data by unauthenticated attackers...

5CVSS7.7AI score0.00603EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/10/25 6:17 p.m.17 views

Authentication flaw

Missing authentication in the StudentPopupDetailsTimetable method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction sensitive student data by unauthenticated attackers...

5CVSS7.7AI score0.00695EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/10/25 6:17 p.m.19 views

Authentication flaw

Missing authentication in the StudentPopupDetailsContactDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitive student data by unauthenticated attackers...

5CVSS7.7AI score0.00695EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/10/25 6:17 p.m.15 views

Authentication flaw

Missing authentication in the GetActiveToiletPasses method in IDAttend’s IDWeb application 3.1.052 and earlier allows retrieval of student information by unauthenticated attackers...

5CVSS7.6AI score0.00695EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/10/25 10:20 a.m.30 views

CVE-2023-27377 Missing Authentication In IDAttend’s IDWeb Application

Missing authentication in the StudentPopupDetailsEmergencyContactDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitive student data by unauthenticated attackers...

7.5CVSS7.9AI score0.00695EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/10/25 10:20 a.m.13 views

CVE-2023-27377 Missing Authentication In IDAttend’s IDWeb Application

Missing authentication in the StudentPopupDetailsEmergencyContactDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitive student data by unauthenticated attackers...

7.5CVSS7.7AI score0.00695EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/10/25 10:19 a.m.13 views

CVE-2023-27376 Missing Authentication In IDAttend’s IDWeb Application

Missing authentication in the StudentPopupDetailsStudentDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitive student data by unauthenticated attackers...

7.5CVSS7.7AI score0.00695EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/10/25 10:19 a.m.23 views

CVE-2023-27376 Missing Authentication In IDAttend’s IDWeb Application

Missing authentication in the StudentPopupDetailsStudentDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitive student data by unauthenticated attackers...

7.5CVSS7.9AI score0.00695EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/10/25 10:18 a.m.29 views

CVE-2023-27375 Missing Authentication In IDAttend’s IDWeb Application

Missing authentication in the StudentPopupDetailsContactDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitive student data by unauthenticated attackers...

7.5CVSS7.9AI score0.00695EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/10/25 10:18 a.m.14 views

CVE-2023-27375 Missing Authentication In IDAttend’s IDWeb Application

Missing authentication in the StudentPopupDetailsContactDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitive student data by unauthenticated attackers...

7.5CVSS7.7AI score0.00695EPSS
SaveExploits0References1
Rows per page
Query Builder